Living in a technological age where there is a near-fanatical obsession with privacy, a move towards encryption seems to make perfect sense.
While there have been calls from some governments to ban encryption and demands for decryption keys to be handed over, there is a drive by companies and online services to try to increase security and privacy with encryption.
But a new report (Don't Panic: Making progress on the encryption debate) from Harvard University's Berkman Center for Internet & Society suggests that encryption may be all but pointless when it comes to curtailing surveillance. While governments and surveillance agencies make balk at the idea of people using encryption to 'go dark' online, and many people embrace the idea as a means of increasing their privacy, the report suggests that the task of surveillance is not going to be made impossible, and could be helped by the Internet of Things (IoT).
In fact, rather than the future being one that features less surveillance, the report suggests that there might actually be more opportunities for surveillance. Drawing on input from security and policy experts from academia, civil society, and the US intelligence community the report looks at consumer-level encryption and what this means for the ability to monitor the communication of criminals, terrorists and the like.
Despite increased take up of encryption, a huge proportion of web traffic remains fully accessible to law enforcement agencies. This includes not only communications which has not been purposely encrypted, but also metadata - that staple of the NSA's diet - which is unencrypted by nature. But more than this, the increased number of connected devices - cars, home heating system, network cameras, smart devices, and so on - actually means that there will be more opportunities for surveillance.
Intelligence and law enforcement agencies may be concerned that end-to-end encryption will make their job harder, but the report suggests that these fears are unfounded. It says:
We have already seen that the likes of the NSA can gather metadata on a massive scale, and this is not something that is expected to be affected by increased awareness of encryption:
But the report also includes prophesies that will undoubtedly concern those with privacy fears. Any switch to using encrypted modes of communication will simply make those conducting surveillance pursue other channels. It notes:
There is also the problem of fragmentation and a lack of standardisation to consider - as well as differing standards and laws around the world. One of the key points raised by the report is that the idea of 'going dark' - that the ability to intercept and surveil communication - is wrong.
While current methods and techniques may increasingly fail, there are plenty of other opportunities for surveillance and privacy infringement available now, and on the horizon.